CVE-2024-33545 WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33545

CVE-2024-33545 pertains to the WordPress WZone plugin by AA-Team and represents an Unauthenticated Missing Authorization vulnerability. Public descriptions indicate affected versions include WZone up to 14.0.10. Red Hat’s advisory reiterates the missing authorization issue and confirms the vulner...

WordPress WZone Plugin <= 14.0.33 is vulnerable to Broken Access Control

Software WZone Type Plugin Vulnerable versions = 14.0.33 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33545 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 24bb9a69dcd0 Credits Rafie Muhammad Patchstack Required...